Quality & Privacy Compliance Coordinator

About Crossover Health

Crossover Health is creating the future of health as it should be. A national, team-based medical group with a focus on wellbeing and prevention that extends beyond traditional sick care, the company delivers an entirely new model of healthcare—Primary Health—built on the foundation of trusted relationships, an interdisciplinary care team approach, and outcomes-based payment. Crossover’s Primary Health model integrates primary care, physical medicine, mental health, health coaching, care navigation and more, and delivers care in surround-sound—in-person, virtually and via asynchronous messaging. Together we are building a community of members that embraces healthcare as a proactive part of their lifestyle.

Job Summary
 

The Quality & Privacy Compliance Associate is responsible for supporting and advancing organizational readiness and compliance in the areas of HIPAA privacy, clinical quality, patient safety, regulatory/accreditation standards, and risk management. This independent contributor role plays a vital part in identifying, assessing, and mitigating compliance risks, while also promoting a culture of continuous quality improvement and operational excellence across all clinical sites.

Job Responsibilities

The role provides consultative and operational support to ensure that internal programs align with both federal and state laws, as well as industry standards and organizational policies. The ideal candidate is proactive, detail-oriented, and capable of translating policy into practice through clear guidance, audits, education, and cross-functional collaboration.

Demonstrated ability to work independently in a remote environment, with strong time management skills, self-direction, and accountability. Proven track record of taking initiative, managing competing priorities effectively, and delivering high-quality work with self-directed initiative.

Key Functions

Privacy & HIPAA Compliance

• Serve as an advisor on health information management practices, providing guidance on the appropriate access, handling, and release of protected health information (PHI) in alignment with HIPAA and applicable state laws. Support the development and improvement of processes related to release of information (ROI), ensuring they are legally compliant, well-documented, and operationally efficient across clinical sites and departments.

• Implement and maintain system-wide privacy programs, policies, and procedures in accordance with HIPAA and applicable laws.

• Conduct privacy audits and risk assessments to ensure the confidentiality, integrity, and security of protected health information (PHI).

• Investigate privacy incidents, support root cause analysis, and oversee documentation and corrective action planning.

• Develop and deliver privacy compliance education to staff and leadership, ensuring awareness of regulatory responsibilities.

Quality, Safety, and Accreditation

• Coordinate clinic-level and system-wide quality, safety, and compliance activities, including AAAHC accreditation readiness.

• Support incident tracking, risk analysis, and patient safety improvement efforts in collaboration with clinical teams.

• Facilitate internal audits, mock surveys, and site assessments to evaluate adherence to quality and regulatory standards.

• Support reporting and trend analysis related to clinical incidents, audit findings, and QI metrics.

Department Operational Support

• Maintain and update compliance policies and SOPs based on changing regulations, best practices, and internal reviews.

• Cross-functionally partner with internal stakeholders to support secure data practices, employee health compliance, and audit follow-ups.

• Serve as a subject matter expert on cross-functional initiatives requiring privacy or quality guidance (e.g., new service lines, clinical expansion, or technology integrations).

• Performs other duties as assigned.

Required Qualifications 

• Bachelor's degree in Healthcare Administration, Health Information Management, Public Health, or equivalent healthcare experience. 

• Working knowledge of HIPAA, OSHA, AAAHC, and related regulatory frameworks.

• Experience conducting audits, managing incidents, and interpreting compliance data.

• Excellent written/verbal communication, critical thinking, organizational skills, and team player is a must.

• Proficient in G-Suite (Docs, Sheets, Slides), Mac environment, and healthcare data systems

• Ability to travel independently up to 30% of the time or as needed.

Preferred Qualifications

• 3+ years minimum work experience in privacy compliance, quality improvement, or regulatory affairs in a healthcare setting.

• Certified in Healthcare Privacy Compliance (CHPC), Certified in Healthcare Compliance (CHC), or similar credential.

• Experience with accreditation processes (e.g., AAAHC, HITRUST).

Physical Job Requirements

• May require standing, walking and sitting for extended amounts of time.

• Occasionally lift and carry items weighing up to 50 lbs.

• Manual and finger dexterity and hand-eye coordination

• Includes full range of body motion including potential of handling and lifting patients.

• Requires corrected vision, hearing and speech within normal ranges. 

• Must be able to effectively communicate with patients and team members.

• Ability to travel independently up to 30% of the time

The base pay range for this position is $38.41 to $50 per hour. Pay range may vary depending on work location, applicable knowledge, skills, and experience. This position may be eligible for an annual bonus opportunity and comprehensive benefits package that includes Medical Insurance, Dental Insurance, Vision Insurance, Short- and Long-Term Disability, Life Insurance, Paid Time Off and 401K.

Crossover Health is committed to Equal Employment Opportunity regardless of race, color, national origin, gender, sexual orientation, age, religion, veteran status, disability, history of disability or perceived disability. If you need assistance or an accommodation due to a disability, you may email us at [email protected].

To all recruitment agencies: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes.

#LI-Remote